# Fines

Source: https://conformitate.md/en/law-195-2024/fines
Updated: 2026-10-17

Law 195/2024

Law No. 195/2024 provides for fines of up to 1,000,000 lei or, for an enterprise, of up to 1% of total turnover in the year preceding the sanction, and for the infringements listed in art. 88(2) of up to 2,000,000 lei or 2%, in each case whichever is higher (art. 88).

## What a fine is

A fine is the pecuniary sanction that the National Centre for Personal Data Protection imposes on the controller when it finds an infringement of the Law [art. 86(1)](https://conformitate.md/en/law-195-2024/article-86#p1 "Fine"). The money is paid into the state budget [art. 86(2)](https://conformitate.md/en/law-195-2024/article-86#p2 "Fine"). The Centre may impose it in addition to, or instead of, its other corrective measures [art. 60(2)(i)](https://conformitate.md/en/law-195-2024/article-60#p2-i "Powers of the Centre").

## The ceilings

The Law sets two levels of fines. Both are maximums, not fixed amounts.

-   **Up to 1,000,000 lei** or, in the case of an enterprise, **up to 1%** of the total turnover achieved in the year preceding the imposition of the sanction, whichever is higher [art. 88(1)](https://conformitate.md/en/law-195-2024/article-88#p1 "Infringements punishable by a fine"). This level covers, among other things, the obligations of the controller and the processor in art. 8, 11, 25–39, 42 and 43, including data protection by design, contracts, records, security, breach notification, impact assessment and the data protection officer [art. 88(1)(a)](https://conformitate.md/en/law-195-2024/article-88#p1-a "Infringements punishable by a fine").
-   **Up to 2,000,000 lei** or, in the case of an enterprise, **up to 2%** of total turnover, whichever is higher [art. 88(2)](https://conformitate.md/en/law-195-2024/article-88#p2 "Infringements punishable by a fine"). This level covers the principles and the conditions for consent [art. 88(2)(a)](https://conformitate.md/en/law-195-2024/article-88#p2-a "Infringements punishable by a fine"), the rights of data subjects [art. 88(2)(b)](https://conformitate.md/en/law-195-2024/article-88#p2-b "Infringements punishable by a fine"), transfers to other states [art. 88(2)(c)](https://conformitate.md/en/law-195-2024/article-88#p2-c "Infringements punishable by a fine"), the obligations in Chapter VI on specific processing situations [art. 88(2)(d)](https://conformitate.md/en/law-195-2024/article-88#p2-d "Infringements punishable by a fine"), and non-compliance with the Centre’s corrective measures or failure to provide access [art. 88(2)(e)](https://conformitate.md/en/law-195-2024/article-88#p2-e "Infringements punishable by a fine").

An infringement of a corrective measure issued by the Centre is also punishable by a fine of up to 2,000,000 lei or, for an enterprise, of up to 2% of total turnover, whichever is higher [art. 88(3)](https://conformitate.md/en/law-195-2024/article-88#p3 "Infringements punishable by a fine"). Total turnover has the meaning given in Competition Law No. 183/2012 [art. 4](https://conformitate.md/en/law-195-2024/article-4#term-22 "total turnover"); if no turnover was recorded in the preceding year, the last year in which the enterprise achieved turnover is taken into account [art. 88(5)](https://conformitate.md/en/law-195-2024/article-88#p5 "Infringements punishable by a fine"). The sanctions also apply to public authorities and institutions [art. 88(4)](https://conformitate.md/en/law-195-2024/article-88#p4 "Infringements punishable by a fine").

## How a fine is set

The Centre ensures that each fine is effective, proportionate and dissuasive [art. 87(1)](https://conformitate.md/en/law-195-2024/article-87#p1 "General conditions for imposing fines"). In deciding whether to impose a fine and on its amount, the circumstances laid down in the Law are taken into account in each case, including the nature, gravity and duration of the infringement, the number of people affected, action taken to mitigate the damage, the technical and organisational measures implemented, previous infringements and the degree of cooperation with the Centre [art. 87(2)](https://conformitate.md/en/law-195-2024/article-87#p2 "General conditions for imposing fines"). The way the infringement became known to the Centre also matters, in particular whether it was notified [art. 87(2)(h)](https://conformitate.md/en/law-195-2024/article-87#p2-h "General conditions for imposing fines").

In the case of a minor infringement, or where a fine would constitute a disproportionate burden on a natural person, a warning may be issued instead of a fine [art. 87(2)](https://conformitate.md/en/law-195-2024/article-87#p2 "General conditions for imposing fines").

Fines may be imposed only if it is established that the controller committed the infringement intentionally or negligently [art. 87(3)](https://conformitate.md/en/law-195-2024/article-87#p3 "General conditions for imposing fines"). Where several provisions are infringed for the same or linked processing operations, the total amount may not exceed the amount specified for the gravest infringement [art. 87(4)](https://conformitate.md/en/law-195-2024/article-87#p4 "General conditions for imposing fines").

## Phasing in

The Law provides a transition period for the amount of fines. From the entry into force of the Law, of the final amount of the pecuniary sanction set by the Centre, the following applies [art. 90(4)](https://conformitate.md/en/law-195-2024/article-90#p4 "Transitional provisions"):

-   from the first year – 10% of the amount of the fine set [art. 90(4)(a)](https://conformitate.md/en/law-195-2024/article-90#p4-a "Transitional provisions");
-   from the second year – 40% of the amount of the fine set [art. 90(4)(b)](https://conformitate.md/en/law-195-2024/article-90#p4-b "Transitional provisions");
-   from the third year – 100% of the amount of the fine set [art. 90(4)(c)](https://conformitate.md/en/law-195-2024/article-90#p4-c "Transitional provisions").

Counting the years from the Law’s entry into force on 23 August 2026 [art. 89(1)](https://conformitate.md/en/law-195-2024/article-89#p1 "Final provisions"), the 10% rate applies until 22 August 2027, the 40% rate until 22 August 2028 and the 100% rate after that date.

The phasing in concerns only the amount of fines; the obligations of the Law apply from its entry into force [art. 89(1)](https://conformitate.md/en/law-195-2024/article-89#p1 "Final provisions").

## Paying the fine

The period for voluntary payment of the fine is at least two months from the communication of the decision [art. 85(2)](https://conformitate.md/en/law-195-2024/article-85#p2 "Execution of the decisions of the Centre"). Decisions that are not complied with are subject to compulsory enforcement [art. 85(3)](https://conformitate.md/en/law-195-2024/article-85#p3 "Execution of the decisions of the Centre").

Tools

-   [Work out the fine ceiling →](https://conformitate.md/en/tools/fine-calculator)

## How we can help with this

-   [GDPR Moldova compliance assessment →](https://conformitate.md/en/services/compliance-assessment)
    
    We assess online how your company processes personal data and give you a written report of what is missing under Law No. 195/2024, in order of priority.
    

## Articles in this topic

1.  [Article 86 Fine](https://conformitate.md/en/law-195-2024/article-86)
2.  [Article 87 General conditions for imposing fines](https://conformitate.md/en/law-195-2024/article-87)
3.  [Article 88 Infringements punishable by a fine](https://conformitate.md/en/law-195-2024/article-88)

**The Romanian and Russian texts are those published in Monitorul Oficial. This English text is an unofficial translation by conformitate.md and has no legal force.**

Not an official publication. The Law was published in Monitorul Oficial No. 367-369/2024, art. 574.

Text verified on 15 October 2026 · [Romanian text on legis.md](https://www.legis.md/cautare/getResults?doc_id=144681&lang=ro)

FAQ

## What clients ask us

### Is the fine always 2% of turnover?

No. The percentages and amounts in the Law are ceilings: the fine is up to 1,000,000 or 2,000,000 lei or, for an enterprise, up to 1% or 2% of total turnover, whichever is higher. The actual amount is set in each case according to the circumstances laid down in the Law. [art. 87](https://conformitate.md/en/law-195-2024/article-87 "General conditions for imposing fines") [art. 88](https://conformitate.md/en/law-195-2024/article-88 "Infringements punishable by a fine")

### Do fines apply in full from the Law’s entry into force?

No. From the entry into force of the Law, of the final amount of the fine set by the Centre, 10% applies from the first year, 40% from the second year and 100% from the third year. [art. 90](https://conformitate.md/en/law-195-2024/article-90 "Transitional provisions")

### Can the Centre issue a warning instead of a fine?

Yes, in the case of a minor infringement or where the fine would constitute a disproportionate burden on a natural person. [art. 87](https://conformitate.md/en/law-195-2024/article-87 "General conditions for imposing fines")

### Can an infringement committed without fault be fined?

No. Fines may be imposed only if it is established that the controller committed the infringement intentionally or negligently. [art. 87](https://conformitate.md/en/law-195-2024/article-87 "General conditions for imposing fines")

---

Provider: conformitate.md · RIGHT CONSULT COMPANY (IDNO 1022600002005) · MD-2072, mun. Chișinău, sect. Botanica, str. Grenoble 259/6, of. 57  
Phone: +373 767 27 667 · Email: contact@conformitate.md  
Prices: https://conformitate.md/en/pricing